Privacy Policy

Secretarius is operated by Knowledge Worker LLC. For any privacy question, write to accounts@secretarius.pro.

Account information is what we need to run the service: the email address used to sign in, the display name entered by an administrator, the organization name and settings, and billing details held by our payment processor.

Governance records are what your organization puts into Secretarius: rosters, positions, calendars, agendas, attendance, motions, votes, minutes, reports, and uploaded governing documents. Your organization owns these records. We process them on its behalf and do not use them for any purpose of our own.

To provide the service, to send the emails the service depends on (one-time sign-in codes, invitations, meeting notices, and minutes distribution where a member has opted in), to take payment, and to respond to support requests.

We do not sell personal information, we do not run advertising, and we do not use your governance records to train models.

Data is stored in a managed cloud database and transmitted over encrypted connections. Governing documents and sensitive member fields are additionally encrypted at rest in the database. Records are isolated per organization at the database level, so one organization cannot reach another's data.

Sign-in is passwordless: a one-time code is sent by email and there is no password for us to store or for anyone to steal.

Administrators of your organization see its full record. Members see the meetings, agendas, and approved minutes they are entitled to, subject to any committee or sub-board restriction the administrator sets. Our staff access an organization's records only when necessary to investigate a support request or a fault.

We rely on a small number of providers to run Secretarius: cloud hosting and database services, a transactional email provider for sign-in codes and notices, Stripe for subscription payments (we never see or store your full card number), and Plausible Analytics for cookieless usage measurement. Optional minutes polishing sends only the draft text you submit to the configured model provider; it is never applied to approved or sealed minutes.

Analytics is provided by Plausible. It is cookieless, sets no advertising identifiers, and does not follow you across other websites. It does not load at all until you accept it in the banner shown on your first visit.

When enabled, we record page views and these product events: Signup Started, Signup Completed, Trial Started, Checkout Started, Checkout Completed, and Plan Change Requested. The only details attached to an event are the plan tier and billing interval. No email address, name, organization name, or user identifier is ever sent.

Governance records are kept for as long as your organization keeps its account, because minutes are a permanent record. When an organization or account is deleted, the records are removed permanently. Ordinary operational logs are retained for a limited period for security and troubleshooting.

An administrator can export the entire organization as structured JSON at any time, and can permanently delete an organization or the whole account with a typed confirmation.

A member who wants their access removed should ask an administrator, who can do it from the roster. Records already entered into the minute book remain part of the organization's history, as governance requires. For any request we can help with directly, write to accounts@secretarius.pro.

Secretarius is a tool for governing bodies and is not intended for children.

If this policy changes materially, we will update the date at the top of this page and notify account administrators by email.